#NFT

Previously, we reported about a shocking hack where a scammer stole a $4 million NFT collection by just taking a photo. That case left us with many questions about the technical vector of the attack. The Trust Wallet conducted an investigation and revealed the scheme. The day before the affair, the perpetrator shared the NDA file with the victim and requested KYC information. The fake NDA contained malware that targeted the smartphone. The criminal then persuaded the victim to transfer funds from the multi-sig wallet to a single Trust Wallet to confirm NFT ownership and copied the information he needed. The balance photo was just smoke and mirrors. But damn, this scheme deserves an episode in the new James Bond series.

Looks like we have a new kind of wallet asset theft: taking a picture of the balance screen. A scammer claiming to be an investor stole an entire collection of NFTs worth about $4 million from a Webaverse founder. The fraudster explained that he needed to see the proof of NFTs before signing a partnership agreement. The victim insists that he only showed the scammer the Trust Wallet balance interface. He revealed no seed phrases or private keys. The thief took some pictures of the screen and went out for a smoke. A few minutes later the funds were drained from the wallet, and the potential partner had never returned. The weird story is confirmed by Etherscan. The odd thing is that the theft happened on Nov. 26, but was reported only now. Did the victim hope to wake up one fine day and realize that everything was just a dream?